Job Description

We are seeking an experienced and technically strong Network Consulting Engineer III to support service delivery across Customer Onboarding, Proof of Concepts (POCs), and Professional Day services. The role focuses on transforming customer networks from MPLS/IPVPN to Aryaka SD-WAN & Unified SASE architecture, coupled with Day 0 firewall configuration and customer-facing technical consulting engagements.

This is a senior individual-contributor role for someone who has moved past standard playbook execution: comfortable owning complex or escalated engagements independently, exercising sound judgment when a situation doesn't fit the textbook, and moving with speed and precision under customer-facing pressure. The individual is expected to be a reliable technical anchor on engagements

Key Responsibilities

• Design, validate, and implement firewall, SD-WAN, SASE, and ZTNA architectures for new and existing customer environments, including more complex or non-standard deployments, and validate implementation through functional, performance, and security testing.
• Take ownership of Day 0 configuration migrations from 3rd-party firewall/SASE solutions, independently resolving issues that arise mid-migration rather than escalating by default.
• Collaborate with pre-sales and sales teams to execute POCs, often taking point on the technical delivery, and present POC results, architectures, and recommendations to customers and stakeholders with minimal oversight.
• Provide technical guidance and informal mentoring to less experienced engineers on the team, reviewing their configurations and troubleshooting approach when needed.
• Contribute to the team's best-practice standards and reusable delivery patterns based on lessons learned across engagements.
• Exercise sound judgment and creative problem-solving on engagements that don't fit established runbooks, escalating only when a decision genuinely requires broader architectural or organizational input.

SD-WAN

• Configure and deploy SD-WAN including NAT, routing, and overlay connectivity, independently handling more complex topologies and multi-site scenarios.
• Implement SLA-based path selection, traffic engineering, and QoS for application performance, and troubleshoot performance issues down to root cause.
• Enable link failover, load balancing, and centralized SD-WAN management, including for higher-availability requirements.
• Lead customers through integrating their network with public IaaS/SaaS providers, adapting the approach for less common environments.

ZTNA

• Deploy ZTNA solutions to provide secure, identity- and application-based remote access, including for more complex user and application landscapes.
• Define user, device, and application-level access policies aligned with Zero Trust principles, balancing security and usability for the customer's environment.
• Integrate ZTNA with identity providers and lead the technical replacement of traditional VPN access, including planning the cutover with the customer.

SASE

• Configure SASE architectures integrating SD-WAN with cloud-delivered security services for multi-site or moderately complex environments.
• Implement policy-based access for internet, SaaS, and private application traffic, and troubleshoot policy conflicts independently.
• Validate end-to-end security, visibility, and performance across branch, remote, and cloud users, and drive resolution when validation surfaces issues.
• Provide best-practice recommendations aligned with Zero Trust and cloud-delivered security principles, adapting standard guidance to the customer's specific constraints.

Required Skills & Experience

Experience

• 3 to 5 years of experience in network security, firewall implementation, and consulting.
• Proven track record delivering professional services or consulting engagements with increasing independence and ownership.
• Solid experience with Day 0 firewall configuration and deployment, including handling complications that arise during migration.
• Multiple firewall migration projects delivered independently, including some with non-standard requirements.

Technical Skills

• Strong, in-depth understanding of networking fundamentals (TCP/IP, routing, switching, DNS), including the ability to troubleshoot multi-layer issues independently.
• Hands-on, advanced experience with enterprise firewall platforms (e.g., Palo Alto Networks, Fortinet, Check Point, Cisco, or equivalent), including more complex policy and HA configurations.
• Strong command of VPN technologies, HA, and security policy design for moderately complex environments.
• Working knowledge of security concepts such as IPS, URL filtering, malware protection, and logging, with the ability to tune these for customer-specific needs.
• Solid working knowledge of cloud networking constructs across major providers (AWS/Azure/GCP) — VPC/VNet design, subnetting, route tables, and peering — sufficient to support integration design conversations with customers.
• Hands-on experience connecting SD-WAN/SASE fabrics to cloud environments via IPsec VPN, and familiarity with direct-connect style private connectivity options (AWS Direct Connect, Azure ExpressRoute, or equivalent).
• Working knowledge of cloud security fundamentals — security groups/NSGs, cloud-native firewalls, and basic IAM concepts — sufficient to align on-prem security policy with cloud-side controls.
• Familiarity with securing hybrid and multi-cloud connectivity patterns, including SaaS access and cloud workload protection at a foundational level.

Soft Skills

• Strong verbal and written communication skills, including comfort presenting directly to customer stakeholders.
• Ability to explain complex technical concepts clearly to both technical and non-technical audiences.
• Strong problem-solving and analytical skills, with the judgment to know when to act independently and when to loop in others.
• Ability to work independently on complex engagements while remaining an effective collaborator across pre-sales, delivery, and support teams.
• Customer-focused mindset with strong attention to detail, balanced with the ability to move quickly under deadline pressure.

Preferred Qualifications

• Relevant certifications (e.g., PCNSA/PCNSE, NSE4+, CCNP Security, Check Point CCSA/CCSE, AWS Certified Solutions Architect – Associate, Microsoft Certified: Azure Administrator Associate, Google Cloud Associate Cloud Engineer).
• Experience working in customer-facing consulting or system integrator roles, including engagements with elevated complexity or visibility.
• Practical exposure to automation or scripting (Python, Ansible) applied to real delivery work is an added advantage.

What We Offer

• Ownership of increasingly complex and high-visibility customer engagements.
• Exposure to enterprise-scale firewall and security deployments, with a clear growth path toward technical leadership.
• Collaborative, growth-oriented work environment with mentoring opportunities in both directions.
• Training and certification opportunities.

This role is ideal for a network security consulting engineer who has outgrown entry-level execution and is ready to independently own complex engagements, mentor others informally, and build toward a technical leadership track.